Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3109b02f8c56154a00a0c434f5f7c2c13c2a54ba.roa
File: 3109b02f8c56154a00a0c434f5f7c2c13c2a54ba.roa (raw, json)
Hash identifier: tP950nrGyCf1dDtgIyVfOOBXU5/CLhQFvbKrRnPz/8E=
Subject key identifier: 70:BA:23:F9:53:6C:FD:01:85:7E:49:41:BF:AC:9D:5B:2D:D0:56:0C
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2D7ABC
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3109b02f8c56154a00a0c434f5f7c2c13c2a54ba.roa
Signing time: Thu 07 Dec 2023 12:42:00 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 27787
IP address blocks: 200.43.113.0/24 maxlen: 24
190.227.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2980540 (0x2d7abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=3109b02f8c56154a00a0c434f5f7c2c13c2a54ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:01:09:f7:0d:96:97:c4:4a:d3:b6:52:67:
a4:da:7a:07:de:7d:a5:8b:76:fb:c8:25:94:4b:9d:
84:63:43:38:aa:2d:84:b3:ad:20:01:14:05:61:ba:
50:0f:c6:01:6a:7f:c9:5a:e5:08:ff:b8:85:04:4d:
75:e7:82:98:3b:b0:84:b7:d5:47:ca:9c:6c:6f:62:
b1:2a:0e:e2:96:3d:b8:ec:cf:68:ed:d7:08:87:5a:
57:d2:e5:b3:2d:b3:d9:96:37:a5:1a:db:f7:ab:75:
27:0c:f4:72:c0:a2:a7:6c:9a:c3:1b:dc:10:8c:31:
0c:f1:0e:a0:ab:7a:99:ed:08:b1:5c:6b:21:d2:c1:
0e:44:30:be:73:3c:9d:e5:c1:63:dd:44:7b:cc:15:
ec:46:4f:ed:48:b2:87:ce:17:91:ac:95:ec:4d:b6:
5b:5e:f1:1b:33:77:51:1e:b4:1b:31:ec:df:8d:a6:
d2:47:49:aa:0c:a4:c4:7f:9d:39:fc:cb:5f:51:27:
fe:dc:ce:de:33:bd:7b:39:d0:50:23:07:b7:56:b7:
d9:03:8c:e5:08:aa:7b:d2:96:70:5d:34:78:f9:f5:
03:c5:93:6c:90:be:c1:f4:39:73:a3:92:00:07:fc:
9f:36:55:76:f2:e4:8a:3a:dd:fd:b2:8d:cd:dc:1b:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BA:23:F9:53:6C:FD:01:85:7E:49:41:BF:AC:9D:5B:2D:D0:56:0C
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/3109b02f8c56154a00a0c434f5f7c2c13c2a54ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.227.12.0/24
200.43.113.0/24
Signature Algorithm: sha256WithRSAEncryption
00:d7:0b:fc:07:76:d2:2a:cd:37:6c:4a:c6:21:5b:17:41:7a:
ba:32:eb:1c:a5:15:11:e5:55:6f:28:6a:b0:92:24:c0:8d:22:
ee:c9:de:ac:d4:64:43:16:e9:db:99:bd:c8:8e:c6:4f:58:70:
3e:04:a4:57:6d:f3:7b:ec:9d:4e:0a:0e:1a:d9:47:f0:e2:c3:
21:d0:11:4f:6c:1e:ab:35:3c:8a:22:aa:c0:43:a2:95:9d:7a:
ac:53:69:67:25:18:eb:59:2b:89:38:60:a4:fe:20:c0:2c:54:
0d:80:06:0c:c1:08:8b:99:0b:a2:40:25:4c:c1:d1:e5:03:c1:
48:cc:98:43:21:ca:b0:01:98:43:da:57:b5:f5:6e:31:df:99:
68:b4:85:13:82:3b:7b:f7:e8:0d:ca:0b:da:97:be:f5:10:d7:
d1:fe:50:d8:a8:23:3c:c1:59:63:f0:40:2b:00:d9:d4:10:11:
43:c7:88:71:b8:6e:25:17:da:0b:1f:a7:ea:f6:ab:34:88:49:
57:69:2d:66:a1:a3:66:d5:ea:38:0b:c0:9f:88:4e:40:85:91:
b1:8c:d6:90:7f:e9:db:90:44:71:2f:ee:4d:69:dc:b5:96:48:
bc:2e:cb:9e:de:77:08:a2:85:f0:f8:f2:ea:a5:07:d5:9a:32:
fd:78:3f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org